Rule setting profiles

Content

• Cloud Posture default
• Organisation profile
• Custom Profile
• How Cloud Posture Scan runs Rules
• Create a Profile
• Configure rules within Profile
• Apply Profile
• Recommended usage of Profiles and rule exceptions maintenance

Note Refer to Cloud Posture's Public API for API support on Profiles.

Cloud Posture default

Downloading the default profile

Viewing the default profile rule settings

1. Click on View rule settings
2. Pick a rule and click on View. The View rule settings pop-up window opens with a JSON format of the selected rule setting.
3. Click on the Copy to clipboard button and paste it to another profile as required.

Organisation Profile

Configuring an Organisation Profile

1. Copy from a profile: allows you to copy an existing profile’s settings into the organisation profile.
   1. Click on Copy from a profile.
   2. From the Copy from a profile pop-up window, select a profile from the profile you wish to copy the settings from. Please note that any changes to the Organisation profile will be reflected in all your current and newly added accounts in your Organisation.
   3. Click Next.
   4. Click on Yes, proceed to confirm your selection. Your Organisation profile Rule configuration is now copied from your selected profile. All the new Rule settings are displayed on the Organisation profile home page.
2. Update Rule Settings: allows you to configure Rules for the default Organisation profile as per your requirements. Please note that any Rules configured at an organisation profile will be applied to all the accounts.
3. Upload: allows you to create a new organisation profile by uploading a profile to Cloud Posture.
4. Download: allows you to download the Organisation profile in a JSON format.
5. Reset all settings: allows you to set the Organisation profile to its default settings and removes all rule configurations.

Custom Profile

How Cloud Posture Scan runs Rules?

1. Cloud Posture Scan runs rules at the Account level first.
2. If the rule/s is not configured at the Account level, then it will run checks at the Organisation Profile level.
3. If a rule has not been configured either at an Account level or the Organisation Profile level, Cloud Posture Scan will run checks at the Cloud Posture default level.

Create a Profile

1. Click on Profiles from the top navigation panel.
2. Under Custom profiles, click on **+ Create Profile.
3. Select the method of profile creation.
   • Create new
     1. Enter New Profile name and New Profile description.
     2. Select an account from the Use existing configurations from an account drop-down to copy profile configurations already applied to existing accounts.
   • Create new using downloaded Profile
     1. Click Browse to select a downloaded profile.
     2. Enter New Profile name, New Profile description. The Profile rule configurations automatically get copied over from the selected profile.
   • !!! note ""
     • Use unique profile names for better identification.
     • Add instructions for your team regarding profile usage and the accounts to apply to.

Profile management

• Edit the profile name and description
• Update rule settings
• Download
• Upload
• Apply the selected profile to your account(s)
• Delete the profile

Note Deleting a profile cannot be undone. You can download the profile and save it as a backup copy before deleting.

Profile rule configurations

1. Click on Update rule settings.
2. Filter rules as per your requirements, for example you can filter by Services, Rule ID, Categories, Active rules, Non-active rules, new or updated rules.
3. You can configure every rule within a profile as per your requirements.

Resetting Profile rules

• Reset: returns a selected rule within a profile to its default settings.
• Reset all to default: returns all profile rules to their default settings.

Note Disabled rules are considered as configured rules i.e. you are configuring to disable the rule. Resetting all rules to default will reset your disabled rules as well.

Rule Icon	Status
	Un-configured rule. Click on Configure to enable and apply rule settings.
	Rule with default settings. Click on Configure to apply rule settings.
	Manually configured rule. Click on Configure to update settings or Reset to default.

Download Profile

Upload Profile

1. Click on Upload.
2. Browse to select the downloaded profile.
3. Select one of the replacement options:
   1. Replace settings only
   2. Replace settings, name and description.
4. Click Next.
5. Review the warning before clicking on Proceed.

Apply Profile to Account

1. Click on Apply to
2. Select account(s) from the list or search for it using name, environment, or account tags.
3. Select the desired overwrite option: Replace, Merge, use profile, and Merge, use account.
4. Enter Notes and click on Next .
   Include exceptions
   Before you click on the Next button, make sure that you review the “Include exceptions” option checked by default. This option allows you to handle your exceptions using Profiles without maintaining them on an account-level.
   Keep “Include exceptions” checked if you wish to overwrite the current account exceptions with those in the merged profile. Or you can uncheck to retain existing account exceptions when the profile is merged.
   You can use Profiles as a source of truth to manage an account’s settings like exceptions and rule configurations without affecting the basic rule configuration in an account.
5. Review the summary
   1. You can Download the account's existing rule settings as a backup
   2. Apply profile, or
   3. Go Back to the overwrite options.

Replace

Merge, use profile

Merge, use account

1. Apply the profile to the relevant account.

Recommended usage of Profiles and rule exceptions maintenance:

1. Creating a new profile and configuring rules with baseline exceptions.
2. Applying the profile to the account/s with “Merge, use profile” and the “Include exceptions” box checked for the accounts that should inherit their exception resources and tags from a profile.
3. Whenever exceptions require updating, only the profile needs to be modified and can be subsequently applied to the account/s.

Example of Account Management with Profiles

• Exceptions - basic profile with default exceptions
• Settings - with configured rule settings. (“Enabled”, “Risk level” or “Settings” fields) You do not need to update any “exceptions” on this profile as they should be stored in the “Exceptions” profile you created.